Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/Pz62yBvIHtJiTgXqw6Oi2kHViEo.roa
File: Pz62yBvIHtJiTgXqw6Oi2kHViEo.roa (raw, json)
Hash identifier: cbDH5rbsbUuVkH6QgJJgauHrR0N0Q9H1/5ysx90pgRM=
Subject key identifier: 3F:3E:B6:C8:1B:C8:1E:D2:62:4E:05:EA:C3:A3:A2:DA:41:D5:88:4A
Certificate issuer: /CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Certificate serial: 4995B2
Authority key identifier: 06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/Pz62yBvIHtJiTgXqw6Oi2kHViEo.roa
Signing time: Sat 01 Jan 2022 02:55:04 +0000
ROA not before: Sat 01 Jan 2022 02:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57924
IP address blocks: 91.236.171.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4822450 (0x4995b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06e4ad7888b08ca4535637b608bb7dc214a6624f
Validity
Not Before: Jan 1 02:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f3eb6c81bc81ed2624e05eac3a3a2da41d5884a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c4:b7:c7:1b:40:c8:b7:b1:dc:7e:fb:fa:0c:
96:85:16:db:50:6d:ed:c3:3d:1f:a4:76:08:c0:90:
33:de:db:56:67:06:ce:34:a5:db:27:48:25:d6:da:
8b:1f:e3:ac:52:5d:ee:92:c6:92:91:12:1d:9d:0b:
fe:fd:4c:8e:93:39:83:f3:50:09:39:e6:53:25:95:
e4:f0:65:12:3f:c4:f2:b2:a4:83:a1:e6:0d:24:7d:
ca:a3:6c:8c:19:31:62:c9:ce:80:98:da:3f:0f:c3:
be:11:9c:d9:42:6b:a2:76:9b:91:71:04:05:51:04:
af:08:e9:51:f4:07:e1:b8:36:8b:a4:41:26:81:ef:
52:8f:1d:23:22:41:af:f3:96:79:b2:ab:ed:66:22:
2c:a4:c7:ef:e8:cf:76:98:e7:e9:83:79:4a:0b:18:
26:a3:63:1c:cc:b7:48:47:6b:15:f2:cc:62:04:a9:
b3:7f:b7:a0:14:d6:d2:a8:54:37:49:fc:9f:f8:1e:
79:bb:24:26:bf:67:8f:40:1c:bc:1a:c3:4c:2c:02:
99:d4:ae:d9:4f:61:c9:93:c6:c8:c8:87:1a:22:d9:
8f:83:f6:c5:d9:96:13:e9:c3:46:96:e4:49:c2:ce:
c8:77:8f:5a:7c:0a:27:b8:c5:10:5c:31:76:78:ce:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3E:B6:C8:1B:C8:1E:D2:62:4E:05:EA:C3:A3:A2:DA:41:D5:88:4A
X509v3 Authority Key Identifier:
keyid:06:E4:AD:78:88:B0:8C:A4:53:56:37:B6:08:BB:7D:C2:14:A6:62:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BuSteIiwjKRTVje2CLt9whSmYk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/Pz62yBvIHtJiTgXqw6Oi2kHViEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f517e4-b42e-4409-b1ff-092e26334026/1/BuSteIiwjKRTVje2CLt9whSmYk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.171.0/24
Signature Algorithm: sha256WithRSAEncryption
31:8e:d5:29:98:02:c5:d6:4e:c0:12:d1:fc:57:94:62:12:37:
44:74:9c:93:61:c9:26:98:be:b0:d8:21:36:3b:d7:04:a7:a8:
fb:a4:22:b2:be:db:c8:76:cd:be:49:73:c1:d2:df:4b:e1:b1:
d6:14:d5:5a:65:20:c7:46:0e:ce:f6:b3:b9:c1:26:81:07:fe:
64:27:69:a8:b1:bd:40:ea:0a:48:71:19:69:19:dc:fa:c6:a9:
b3:f3:9b:f9:b7:fc:c5:bc:cc:69:79:f8:d5:95:42:dc:cb:6e:
00:2c:74:89:f1:90:6f:ed:4d:92:1c:e8:2b:43:3f:5d:88:32:
c1:72:9c:b5:bd:0d:31:cd:48:64:cc:25:87:be:e4:89:3e:96:
4c:08:e4:98:9f:ac:42:46:eb:ff:d7:1a:18:18:00:89:22:08:
0f:86:96:ed:df:04:e6:61:c8:f0:84:6d:2d:48:0d:8b:56:01:
ea:02:12:af:a0:f0:b4:83:89:f0:7e:88:fc:3e:5f:5f:b4:4c:
61:f2:52:0c:83:bf:9b:58:bc:84:0a:45:c1:d5:04:3c:22:14:
5b:f7:42:26:84:6b:57:63:c0:99:d7:a1:96:67:91:2e:61:47:
9c:cc:63:cf:89:17:21:2e:2e:39:32:81:bf:51:d7:82:eb:0a:
36:7b:15:e7
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDSZWyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDA2
ZTRhZDc4ODhiMDhjYTQ1MzU2MzdiNjA4YmI3ZGMyMTRhNjYyNGYwHhcNMjIwMTAx
MDI1NTA0WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEygzZjNlYjZjODFiYzgx
ZWQyNjI0ZTA1ZWFjM2EzYTJkYTQxZDU4ODRhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0sS3xxtAyLex3H77+gyWhRbbUG3twz0fpHYIwJAz3ttWZwbO
NKXbJ0gl1tqLH+OsUl3uksaSkRIdnQv+/UyOkzmD81AJOeZTJZXk8GUSP8TysqSD
oeYNJH3Ko2yMGTFiyc6AmNo/D8O+EZzZQmuidpuRcQQFUQSvCOlR9AfhuDaLpEEm
ge9Sjx0jIkGv85Z5sqvtZiIspMfv6M92mOfpg3lKCxgmo2MczLdIR2sV8sxiBKmz
f7egFNbSqFQ3Sfyf+B55uyQmv2ePQBy8GsNMLAKZ1K7ZT2HJk8bIyIcaItmPg/bF
2ZYT6cNGluRJws7Id49afAonuMUQXDF2eM6JawIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFD8+tsgbyB7SYk4F6sOjotpB1YhKMB8GA1UdIwQYMBaAFAbkrXiIsIykU1Y3
tgi7fcIUpmJPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
QnVTdGVJaXdqS1JUVmplMkNMdDl3aFNtWWs4LmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC83OC9mNTE3ZTQtYjQyZS00NDA5LWIxZmYtMDkyZTI2MzM0MDI2LzEv
UHo2MnlCdklIdEppVGdYcXc2T2kya0hWaUVvLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9m
NTE3ZTQtYjQyZS00NDA5LWIxZmYtMDkyZTI2MzM0MDI2LzEvQnVTdGVJaXdqS1JU
VmplMkNMdDl3aFNtWWs4LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+yrMA0GCSqGSIb3DQEBCwUAA4IB
AQAxjtUpmALF1k7AEtH8V5RiEjdEdJyTYckmmL6w2CE2O9cEp6j7pCKyvtvIds2+
SXPB0t9L4bHWFNVaZSDHRg7O9rO5wSaBB/5kJ2mosb1A6gpIcRlpGdz6xqmz85v5
t/zFvMxpefjVlULcy24ALHSJ8ZBv7U2SHOgrQz9diDLBcpy1vQ0xzUhkzCWHvuSJ
PpZMCOSYn6xCRuv/1xoYGACJIggPhpbt3wTmYcjwhG0tSA2LVgHqAhKvoPC0g4nw
foj8Pl9ftExh8lIMg7+bWLyECkXB1QQ8IhRb90ImhGtXY8CZ16GWZ5EuYUeczGPP
iRchLi45MoG/UdeC6wo2exXn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org